Privacy
Last updated: 31 August 2026
What we collect
When you place an order, we collect your name, email address, delivery address, phone number if you give one, and the details of what you ordered — including the name, colours and designs you chose for a custom box, and any notes you add.
Payment details are entered on Shopify's secure checkout. We never see or store your card number.
If you email us, we have your email address and whatever you tell us in it.
We don't run any analytics or tracking on this website. No Google Analytics, no advertising pixels, no session recording. We don't build a profile of you and we don't set advertising cookies.
One technical note, for completeness: our site loads its fonts from Google Fonts, which means Google receives your IP address and browser type in order to send the font files. That's how most websites load fonts, and it's the only third-party request our pages make.
How we use it
We use your details to make your kit, get it to you, and talk to you about your order. That's it.
We don't currently send marketing emails. If that changes, we'll ask you to opt in first — we won't add you to a list because you bought something.
If you tag us in a photo on Instagram, we may share it on our website or socials. Tell us any time if you'd rather we didn't, or ask us to take something down, and we'll do it straight away, no questions.
Sharing & payments (Shopify)
Our shop and checkout run on Shopify, which stores your order and processes your payment. Shopify has its own privacy policy and its own cookies and consent banner, and once you're on the checkout page you're on Shopify's system. You can read their policy at shopify.com/legal/privacy.
We also share the minimum needed with:
- Australia Post, to deliver your parcel — name, address, contact details
- Accounting software, to keep proper business records. We may use software such as Xero for this.
We don't sell your information to anyone, and we don't share it for advertising.
Data retention
We keep order records for as long as the law requires us to keep business and tax records — currently five years.
Emails we keep while they're useful, then delete.
Your rights
You can ask us at any time to:
- Tell you what information we hold about you
- Correct anything that's wrong
- Delete your details, where we're not required to keep them for tax records
- Remove a photo of you or your children from our website or socials
Email joyfulbrushau@gmail.com and we'll sort it out. We reply within 48 hours.
Contact
Joyful Brush AU
ABN 57 757 640 963
joyfulbrushau@gmail.com